CLEANSTART-2026-JF58043: As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven connections to Ser...
Security vulnerability affects the nfs-subdir-external-provisioner package. As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven connections to Services, Pods, Nodes, or StorageClass service providers.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/nfs-subdir-external-provisionerto a version that resolves this vulnerability.Fixed in 4.0.2-r4
Event History
Frequently Asked Questions
What level of access and conditions are required for exploitation?
The assessment indicates that an attacker needs network access and low privileges, and exploitation has high attack complexity. No user interaction is required.
What impact is indicated if exploitation succeeds?
The reported impact is limited to low confidentiality impact. No integrity or availability impact is indicated.